One popular trope in science fiction films is the high-level security clearance requiring iris scanning. By the end of this year, not only will that feature no longer be science fiction, it will be mobile! Read more

Based on reports starting to be made by users, Google is either testing or slowly rolling out a new lock mode for Android devices designed to detect when a device is physically in a user’s possession. The lock mode, called “On Body Detection” uses a device’s sensors to detect whether a device is being held in a person’s hand or is in their pocket and will keep the device unlocked. If the device is set on a table or something similar, the device will lock, requiring a user to employ their normal unlock method. Read more

Last fall in the lead up to the release of Android Lollipop, Google let it out that they were planning to enable encryption of storage by default on new devices. This was going to be a change from previous versions of the Android operating system which had the capability of encrypting storage space, but left it up to the user to enable the encryption. As several new devices are starting to finally come to market loaded with Android Lollipop out of the box, Google has apparently decided not to make encryption the default, at least not for their partners manufacturing mobile devices. Read more

In the days leading up to MWC 2015 Silent Circle announced they had bought out Geeksphone, their partner in development of the original Blackphone and their own operating system, PrivatOS. The company has now revealed their plans to provide a complete Enterprise Privacy Platform consisting of hardware devices like a new Blackphone 2 smartphone and Blackphone+ tablet, improvements to their PrivatOS operating system, and apps designed to enhance privacy for end users. Read more

Many were concerned with Google’s decision to unbundle WebView from the core system starting with Android 5.0 Lollipop. Older devices would be left behind, too, without updates and that means compromised security. Fortunately, Google has realized so many Android apps take advantage of WebView that it only makes sense to further support. With the latest version of Android, Google will be able to update WebView independently. Right now, developers can join the new beta channel to gain access to new APIs and other items. Developers will be able to become familiar with the updates before users get to see them.

You can join the beta channel of Android System WebView by clicking here.

Right on the heels of adding in new features to Knox, Samsung has announced an offer for customers that use the security service. Any customers that sign up for Knox will get a free 3 month trial of Google Drive for Work, which is obviously Google’s own cloud storage service that’s centered around business security.

The offer nets customers a full 1 TB of storage, and if more than 5 users take part, that gets bumped up to unlimited storage. The encryption on the service is top notch, which goes hand-in-hand with Samsung’s take on Knox, so this might be a worthwhile offer for many people. Read more

Marriott has recently been in the tech news lately due to plans to block customers’ personal Wi-Fi hotspots when visiting one of the company’s properties. That move earned them a lot of negative press and pressure from the likes of the FCC and eventually caused them to reverse their course. Now it has been discovered that Marriott’s app for Android may have exposed customer data, including credit card information, to possible attack and pilfering ever since its launch in 2011. The flaw was discovered by Randy Westergren, a senior software developer with XDA-Developers, who also found a major hole in Verizon’s mobile app. Read more

It was reported by Talk Android’s Jeff Causey on the 12th of January (link here) that Google would no longer be providing security updates to WebView on devices running Android 4.3 (Jelly Bean) and earlier. In fact, it is even deeper than that: Google will not be managing the entire WebKit for these versions any longer, from which WebView is derived.

A new report that surfaced today claims that Google has ended support for WebView on Android devices running Android 4.3 or older, a move that could leave users exposed to malicious attacks. WebView is considered a “core component” of Android and is used by applications to display web pages without opening an actual browser session. Starting with Android 5.0 Lollipop, Google decided to unbundle WebView from the core system so updates could be pushed out via the Google Play Store.

The source of the news regarding a lack of updates for Android versions 4.3 or older came from a response by Google’s Android security team to a report of a bug in the AOSP browser which is based on WebView. According to the response to Joe Vennix of Rapid7 and independent researcher Rafay Baloch: Read more

On the hardware side of things, Qualcomm has announced they are working on a solution for stolen and lost devices called SafeSwitch, which will allow users to remotely lock their devices to secure personal information. Once the device is found, it can then be unlocked and re-activated. Read more